Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.cer
File:                     D0C52D0E299830DE070523F88C9F14FF2DAB2F25.cer (raw, json)
Hash identifier:          M1FycsuDKG/kwZbVP2R/FqYM/aume8q0D1aOuPqhx4w=
Subject key identifier:   D0:C5:2D:0E:29:98:30:DE:07:05:23:F8:8C:9F:14:FF:2D:AB:2F:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1463B532FD455657A54E831C4FF4A4C4A6926369
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Aug 2024 18:46:35 +0000
Certificate not after:    Fri 08 Aug 2025 18:51:35 +0000
Subordinate resources:    AS: 269102
                          IP: 45.178.236.0/22
                          IP: 2804:5f78::/32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 18:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:63:b5:32:fd:45:56:57:a5:4e:83:1c:4f:f4:a4:c4:a6:92:63:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  9 18:46:35 2024 GMT
            Not After : Aug  8 18:51:35 2025 GMT
        Subject: CN=D0C52D0E299830DE070523F88C9F14FF2DAB2F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:7b:c4:1f:2d:67:8a:5b:1b:3f:e1:29:74:
                    ef:4e:3f:ad:48:80:46:c1:8f:fa:5d:b8:a2:68:95:
                    a0:33:b1:d5:99:76:09:f1:87:09:23:d3:99:b3:98:
                    b9:a6:05:d1:ec:ce:66:03:7f:79:9a:a0:99:f1:d4:
                    be:1e:a8:91:d7:0d:b9:89:32:5c:17:3e:2c:42:46:
                    a9:10:52:c2:11:64:90:51:73:01:07:f3:99:6d:94:
                    e6:60:5e:ce:ba:e3:10:47:b9:b7:f1:96:f1:b4:ed:
                    fc:70:4b:c1:b4:ca:3a:50:a0:c3:83:97:51:0b:bc:
                    a7:ff:07:e0:de:f4:40:a5:40:88:10:03:26:8a:24:
                    91:e2:20:4e:68:cf:d4:07:89:ff:d4:99:b7:09:3a:
                    99:e9:81:8e:e7:e1:19:51:79:eb:41:33:f6:d4:27:
                    17:42:89:8c:a0:ff:b7:c5:e1:b5:61:15:4f:7f:ed:
                    85:2f:1b:98:6d:01:75:69:9d:a0:2b:17:f7:a0:03:
                    a3:2d:26:1e:58:46:cf:ce:94:5b:3f:1a:35:48:59:
                    48:86:68:c2:e6:d6:c0:ab:8f:b1:eb:93:02:0d:db:
                    ca:8f:c1:33:2a:2c:d7:63:93:d1:0d:8f:0e:5a:2f:
                    44:8a:a2:8f:c2:f0:5d:20:6c:7b:08:a3:3b:86:6b:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:C5:2D:0E:29:98:30:DE:07:05:23:F8:8C:9F:14:FF:2D:AB:2F:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D0C52D0E299830DE070523F88C9F14FF2DAB2F25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.236.0/22
                IPv6:
                  2804:5f78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269102

    Signature Algorithm: sha256WithRSAEncryption
         6a:57:8a:5e:23:59:9a:37:7c:e1:ac:de:1d:06:ce:36:cb:44:
         cd:06:50:d6:ee:1b:15:d5:e3:7a:e8:74:9f:bc:45:f7:1e:b0:
         76:d7:9b:3d:9a:aa:3d:58:70:f8:31:65:3e:e6:8a:d4:4a:bc:
         61:0e:2e:2f:af:9b:e2:55:6b:2d:d0:14:c0:83:1f:c1:72:89:
         54:24:98:f9:2a:b7:3f:0d:f5:9e:b4:83:bd:16:f2:8a:b5:63:
         e2:42:d4:4e:d9:54:4a:31:a4:db:c2:80:de:e4:3a:af:bb:68:
         85:45:41:e9:5a:f3:2a:f1:62:43:fb:93:1a:cf:2f:68:81:e1:
         bd:1e:79:d0:77:59:5b:73:c6:31:c6:54:0b:20:99:e9:1d:d2:
         15:51:f3:10:c7:b1:14:27:e6:82:cf:15:68:6f:97:f4:29:95:
         f2:82:fa:1a:65:e8:a3:25:c8:b8:bd:fc:ef:35:7a:60:15:4e:
         5d:1d:e6:cc:0e:31:94:84:ab:bb:05:bc:9d:f7:cf:76:f1:99:
         82:14:b3:20:b8:ff:87:3a:92:20:72:c2:24:b6:26:ce:cc:14:
         27:94:d6:41:d3:82:72:2a:8a:07:6a:bb:81:ea:6d:17:da:cd:
         4a:11:0b:16:fb:83:0e:7b:22:94:a6:3b:25:26:f7:b6:b7:a0:
         40:4f:81:3d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUFGO1Mv1FVlelToMcT/SkxKaSY2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDkxODQ2MzVaFw0yNTA4MDgxODUxMzVaMDMxMTAvBgNV
BAMTKEQwQzUyRDBFMjk5ODMwREUwNzA1MjNGODhDOUYxNEZGMkRBQjJGMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVXvEHy1nilsbP+EpdO9OP61I
gEbBj/pduKJolaAzsdWZdgnxhwkj05mzmLmmBdHszmYDf3maoJnx1L4eqJHXDbmJ
MlwXPixCRqkQUsIRZJBRcwEH85ltlOZgXs664xBHubfxlvG07fxwS8G0yjpQoMOD
l1ELvKf/B+De9EClQIgQAyaKJJHiIE5oz9QHif/UmbcJOpnpgY7n4RlReetBM/bU
JxdCiYyg/7fF4bVhFU9/7YUvG5htAXVpnaArF/egA6MtJh5YRs/OlFs/GjVIWUiG
aMLm1sCrj7HrkwIN28qPwTMqLNdjk9ENjw5aL0SKoo/C8F0gbHsIozuGa3D/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQxS0OKZgw3gcF
I/iMnxT/LasvJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0tm
UTFyVjFYV2ZhYTJOOWY1czI5Y0xubllnSFlqb3d2M2lRZVI5UmQ1dlEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdL
ZlExclYxWFdmYWEyTjlmNXMyOWNMbm5ZZ0hZam93djNpUWVSOVJkNXZRLzAvRDBD
NTJEMEUyOTk4MzBERTA3MDUyM0Y4OEM5RjE0RkYyREFCMkYyNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbLsMA0EAgACMAcDBQAoBF94MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbLjANBgkqhkiG9w0BAQsFAAOCAQEAaleKXiNZmjd84aze
HQbONstEzQZQ1u4bFdXjeuh0n7xF9x6wdtebPZqqPVhw+DFlPuaK1Eq8YQ4uL6+b
4lVrLdAUwIMfwXKJVCSY+Sq3Pw31nrSDvRbyirVj4kLUTtlUSjGk28KA3uQ6r7to
hUVB6VrzKvFiQ/uTGs8vaIHhvR550HdZW3PGMcZUCyCZ6R3SFVHzEMexFCfmgs8V
aG+X9CmV8oL6GmXooyXIuL387zV6YBVOXR3mzA4xlISruwW8nffPdvGZghSzILj/
hzqSIHLCJLYmzswUJ5TWQdOCciqKB2q7geptF9rNShELFvuDDnsilKY7JSb3treg
QE+BPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 30 21:07:17 2024 by rpki-client on console-fra.rpki-client.org